Package · Ubuntu

firefox

1,443 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

Medium 5.6

CVE-2024-4367 Public exploit EPSS 71%

PDF.js vulnerable to arbitrary JavaScript execution upon opening a malicious PDF

A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11.

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu npm

May 14, 2024
Medium 6.5

CVE-2024-0741 Public exploit

An out of bounds write in ANGLE could have allowed an attacker to corrupt memory leading to a potentially exploitable c…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Jan 23, 2024
Medium 6.5

CVE-2022-25313 Public exploit

In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via a large nesting depth…

thunderbird firefox insighttoolkit4 expat Debian Ubuntu Alpine

Feb 18, 2022
Medium 5.6

CVE-2017-5715 Public exploit EPSS 73%

Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disc…

Intel Microprocessors with Speculative Execution linux-raspi2 linux-hwe Debian Ubuntu Alpine

Jan 4, 2018
Medium 5.6

CVE-2017-5753 Public exploit EPSS 94%

Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of…

Intel Most Modern Operating Systems linux-raspi2 linux-hwe Debian Ubuntu Alpine

Jan 4, 2018
Medium 5.6

CVE-2017-5754 Public exploit EPSS 67%

Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disc…

Intel Most Modern Operating Systems linux-raspi2 linux-hwe Debian Ubuntu Alpine

Jan 4, 2018